nvm

Security Notices
nvm 0.40.8 Blocks Malicious .nvmrc Path Traversal

A malicious repository-controlled .nvmrc can make vulnerable nvm read outside its alias directory and disclose local files. Update the active nvm installation and review developer, CI and shell-hook workflows that process untrusted repositories.

Read this guide